asked on

System.Security.Principal.IdentiyNotMappedException: Some or all identity references could not be translated.

I have been getting a certain error in Event Viewer and was hoping someone could shed some light onto a possible cause.

The error reads:

Message:"System.ServiceModel.FaultException`1[System.ServiceModel.ExceptionDetail]: Some or all identity references could not be translated. (Fault Detail is equal to An ExceptionDetail, likely created by IncludeExceptionDetailInFaults=true, whose value is:
System.Security.Principal.IdentityNotMappedException: Some or all identity references could not be translated.
at System.Security.Principal.SecurityIdentifier.Translate(IdentityReferenceCollection sourceSids, Type targetType, Boolean forceSuccess)
at System.Security.Principal.SecurityIdentifier.Translate(Type targetType)

Any ideas?

Thanks

itguy

Zac Harris

ASKER

I am thinking this is leaning towards being a security issue with authentication between servers.

btan

the user name for login must have been wrong or non-existence (You may have removed a service account inadvertently? probably need dome reset to default) ..I saw some instance resolving using

> set the identityReferences to this:
new SecurityIdentifier(identity)
> change UserDomainName to MachineName:
string User = System.Environment.UserDomainName + "\\" + user.ToString();
> use LOGON_USER instead of REMOTE_USER :
Request.ServerVariables["REMOTE_USER"]

Zac Harris

ASKER

I will check and see if there are any service accounts missing... forgive my Friday mind, but is there a specific prompt I need to run these commands at?

I'm also assuming this needs to be done at an elevated prompt as well?

btan

probably is to check all default account in the appl services you are running, there may be some other leading event on logon attempt even before this error in the event viewer - best check with apps team on the logon account used. Some may impersonate the service account as perm account to perform certain task like ldap search etc

elevated account indeed but first is to check the valid account is used and then its privileges later. the errors tend to indicate issue with account instead of privileges...maybe look at all privileged account later

Zac Harris

ASKER

I haven't forgotten about this question. I am working with some of our developers to understand the errors I am getting.

ASKER CERTIFIED SOLUTION

Zac Harris

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Zac Harris

ASKER

Our developers fixed this issue. It was determined to have been caused by a Microsoft Update that was installed on the server hosting our application.